CVE-2010-4743

abcm2ps < 5.9.13 - Remote Code Execution via Crafted ABC File

Title source: llm

Description

Heap-based buffer overflow in the getarena function in abc2ps.c in abcm2ps before 5.9.13 might allow remote attackers to execute arbitrary code via a crafted ABC file, a different vulnerability than CVE-2010-3441. NOTE: some of these details are obtained from third party information.

References (8)

Core 8

Core References

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/40033

Third Party Advisory vendor-advisory x_refsource_fedora

http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054424.html

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2011/0390

Issue Tracking, Mailing List, Patch, Third Party Advisory x_refsource_confirm

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=577014

Issue Tracking, Third Party Advisory x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=600729

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/43338

Third Party Advisory vendor-advisory x_refsource_fedora

http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054015.html

Broken Link x_refsource_confirm

http://moinejf.free.fr/abcm2ps-5.txt

Scores

EPSS 0.0322

EPSS Percentile 86.8%

Details

CWE

CWE-787

Status published

Products (3)

fedoraproject/fedora 13

fedoraproject/fedora 14

moinejf/abcm2ps < 5.9.13

Published Feb 18, 2011

Tracked Since Feb 18, 2026